What Is Claimed Is: 



1 LA method that facilitates establishing a quorum for a cluster within 

2 a plurality of computers that are geographically distributed, the method 

3 comprising: 

4 detecting a change in membership of the cluster at a computer within the 

5 plurality of computers; and 

6 upon detecting the change in membership, 

7 forming a potential new cluster by attempting to 

8 communicate with all other computers within the plurality of 

9 computers, 

^ 1 0 accumulating votes for each computer successfully 

'44 

11 contacted, 

12 attempting to gain control of a quorum server located at a 
^ 13 site separate from all computers within the plurality of computers, 
93 14 if successful, accumulating the quorum server's votes, and 
£2 15 if a total of accumulated votes includes a majority of 

^ 16 available votes, forming a new cluster from the potential new 

w 

Ul 17 cluster. 



«s4 



1 2. The method of claim 1, wherein detecting the change in 

2 membership involves: 

3 exchanging heartbeat messages with all computers that are part of the 

4 cluster; and 

5 upon discovering an absence of heartbeat messages from any computer in 

6 the cluster, initiating a cluster membership protocol. 
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3. The method of claim 1, wherein detecting the change in cluster 
membership includes detecting that the cluster has not been formed. 

4. The method of claim 1 , wherein attempting to gain control of the 
quorum server involves communicating with the quorum server using 
cryptographic techniques. 

5. The method of claim 1 , further comprising: 

exchanging a status message with each member of the new cluster; and 
updating a local status at the computer to a most recent status available 
within the status message. 

6. A method that facilitates establishing a quorum for a cluster within 
a plurality of computers that are geographically distributed, the method 
comprising: 

providing a quorum server at a site separate from a location of a computer 
within the plurality of computers; 

assigning at least one vote to each computer within the plurality of 
computers; 

assigning at least one vote to the quorum server; 

attempting to establish communications between each pair of computers 
within the plurality of computers; 

accumulating a count of votes for each computer communicated with at 
each computer; 

attempting to establish control over the quorum server from each computer 
within the plurality of computers; 
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if control is established over the quorum server, accumulating the quorum 
server's votes in the count of votes; and 

establishing the quorum when a majority of available votes has been 
accumulated in the count of votes. 

7. The method of claim 6, wherein the quorum server grants control 
to only a first computer attempting to establish control 

8. The method of claim 6, wherein the quorum server grants control 
to only one computer of all computers attempting to establish control based on a 
pre-established priority list. 

9. The method of claim 6, wherein votes are assigned so that the 
quorum includes at least one computer that was in an immediately previous 
cluster, to ensure that a cluster formed from the quorum has current data. 

10. The method of claim 6, wherein attempting to establish control 
over the quorum server involves establishing communications with the quorum 
server. 

1 1 . The method of claim 10, wherein establishing communications 
with the quorum server involves using cryptographic techniques. 

12. A computer-readable storage medium storing instructions that 
when executed by a computer cause the computer to perform a method that 
facilitates establishing a quorum for a cluster within a plurality of computers that 
are geographically distributed, the method comprising: 
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1 detecting a change in membership of the cluster at a computer within the 

2 plurality of computers; and 

3 upon detecting the change in membership, 

4 forming a potential new cluster by attempting to 

5 communicate with all other computers within the plurality of 

6 computers, 

7 * accumulating votes for each computer successfully 

8 contacted, 

9 attempting to gain control of a quorum server located at a 

1 0 site separate from all computers within the plurality of computers, 

1 1 if successful, accumulating the quorum server's votes, and 

12 if a total of accumulated votes includes a majority of 

13 available votes, forming a new cluster from the potential new 



iJ'l 

C3 14 cluster, 



1 13. The computer-readable storage medium of claim 1 2, wherein 

2 detecting the change in membership involves: 

3 exchanging heartbeat messages with all computers that are part of the 

4 cluster; and 

5 upon discovering an absence of heartbeat messages from any computer in 

6 the cluster, initiating a cluster membership protocol. 

1 14. The computer-readable storage medium of claim 12, wherein 

2 detecting the change in cluster membership includes detecting that the cluster has 

3 not been formed. 
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1 15. The computer-readable storage medium of claim 1 2, wherein 

2 attempting to gain control of the quorum server involves communicating with the 

3 quorum server using cryptographic techniques. 

1 1 6. The computer-readable storage medium of claim 1 2, the method 

2 further comprising: 

3 exchanging a status message with each member of the new cluster; and 

4 updating a local status at the computer to a most recent status available 

5 within the status message. 

1 1 7. A computer-readable storage medium storing instructions that 

2 when executed by a computer cause the computer to perform a method that 

3 facilitates establishing a quorum for a cluster within a plurality of computers that 

4 are geographically distributed, the method comprising: 

5 providing a quorum server at a site separate from a location of a computer 

6 within the plurality of computers; 

7 assigning at least one vote to each computer within the plurality of 

8 computers; 

9 assigning at least one vote to the quorum server; 

1 0 attempting to establish communications between each pair of computers 

1 1 within the plurality of computers; 

12 accumulating a count of votes for each computer communicated with at 

13 each computer; 

14 attempting to establish control over the quorum server from each computer 

1 5 within the plurality of computers; 

1 6 if control is established over the quorum server, accumulating the quorum 

1 7 server's votes in the count of votes; and 
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1 8 establishing the quorum when a majority of available votes has been 

1 9 accumulated in the count of votes. 

1 18, The computer-readable storage medium of claim 1 7, wherein the 

2 quorum server grants control to only a first computer attempting to establish 

3 control. 

1 19. The computer-readable storage medium of claim 1 7, wherein the 

2 quorum server grants control to only one computer of all computers attempting to 

3 establish control based on a pre-established priority list. 

1 20. The computer-readable storage medium of claim 17, wherein votes 

2 are assigned so that the quorum includes at least one computer that was in 'an 

3 immediately previous cluster, to ensure that a cluster formed from the quorum has 

4 current data. 

1 21. The computer-readable storage medium of claim 1 7, wherein 

2 attempting to establish control over the quorum server involves establishing 

3 communications with the quorum server. 

1 22 . The computer-readable storage medium of claim 2 1 , wherein 

2 establishing communications with the quorum server involves using cryptographic 

3 techniques. 

1 23 . A system that facilitates establishing a quorum for a cluster within 

2 a plurality of computers that are geographically distributed, comprising: 

3 the plurality of computers; 
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a network coupling the plurality of computers; 

a quorum server located at a site separate from any one computer of the 
plurality of computers; and 

an independent communications link coupling each computer of the 
plurality of computers and the quorum server. 

24. The system of claim 23 , wherein the quorum server includes a 
mechanism for granting control to only one computer of the plurality of computers 
requesting control. 

25. The system of claim 23, wherein the quorum server includes a 
mechanism for maintaining a list of computers accepted into the cluster. 

26. The system of claim 23, wherein the quorum server includes a 
mechanism for cryptographically ensuring an identity of a computer attempting to 
establish control 

27. The system of claim 23, wherein the quorum server includes 
monitoring means to monitor the status of each computer within the plurality of 
computers. 
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